Cryptography, data security, authentication, and encryption solutions
Generate cryptographically secure, uncrackable random passwords with custom entropy rules.
Compute MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 cryptographic hashes in real time.
Decode and inspect JSON Web Tokens (JWT) client-side to examine Header, Payload, and expiration status.
Decode and verify Certificate Signing Requests (CSR) to inspect Common Name, Organization, and key size.
Generate self-signed SSL certificates and RSA private keys (PEM format) client-side for local development.
Check SSL certificate expiration date, remaining valid days, issuer, and domain coverage from PEM.
Generate secure .htpasswd credentials for Apache and Nginx HTTP Basic Authentication (SHA-1 & MD5).
Validate IBAN numbers via MOD-97 and verify credit card validity using the Luhn algorithm with 100% local browser privacy.
Craft and sign mock JSON Web Tokens (JWT) for local API development and testing.
Analyze password entropy and calculate how long a brute-force attack would take to crack it.
Generate unguessable 4-digit and 6-digit random PIN numbers using Web Crypto API.
Generate cryptographic Bcrypt password hashes and verify existing hashes against plaintext passwords.
Compute Hash-based Message Authentication Codes (HMAC) using SHA-256, SHA-512, MD5, and secret keys.
Encrypt and decrypt plaintext strings using AES-256 or TripleDES with a custom secret passphrase.
Partially redact a single API key, secret token, or card string by keeping the first N and last M characters visible (e.g. sk-proj-****5C4D).
Generate live 30-second TOTP two-factor authentication tokens and QR codes compatible with Google Authenticator.
Generate cryptographic RSA public and private key pairs (1024, 2048, 4096-bit) in PEM format using Web Crypto API.
Configure production HTTP Security Headers (HSTS, CSP, X-Frame-Options) for Nginx, Apache, or Vercel.
Parse HTTP Set-Cookie response headers to inspect HttpOnly, Secure, and SameSite security flags.
Identify probable hashing algorithms (MD5, SHA-256, Bcrypt, Argon2) by analyzing string structure.
Generate W3C-compliant SHA-256, SHA-384, and SHA-512 Subresource Integrity (SRI) Base64 hashes and ready-to-use HTML <script> and <link> tags.
Inspect OpenSSH public keys (ssh-ed25519, ssh-rsa, ecdsa), extract key algorithm metadata, and compute the exact OpenSSH SHA-256 fingerprint.
Automatically scan bulk server logs, JSON, or text documents and scrub all emails, credit cards, IBANs, phone numbers, and IPv4 addresses.
Configure secure Access-Control-Allow-* CORS headers, detect credential wildcard misconfigurations, and export snippets for Nginx, Express, and Next.js.